IT Risk Officer

IT RISK OFFICER - ITIP (JOB NUMBER: CIB007009)

**About BNP Paribas Group**:
BNP Paribas is a top-ranking bank in Europe with an international profile. It operates in 71 countries and has almost 199 000 employees. The Group ranks highly in its three core areas of activity: Domestic Markets and International Financial Services (whose retail banking networks and financial services are grouped together under Retail Banking & Services) and Corporate & Institutional Banking, centred on corporate and institutional clients. The Group helps all of its clients (retail, associations, businesses, SMEs, large corporates and institutional) to implement their projects by providing them with services in financing, investment, savings and protection. In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas enjoys leading positions in Europe, a strong presence in the Americas and has a solid and fast-growing network in the Asia/Pacific region.

**About BNP Paribas India Solutions**:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, a leading bank in Europe with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 6000 employees, to provide support and develop best-in-class solutions.

**About Businessline/Function**:
The CIB Production team supports IT Infrastructure and Application production support function is based out of India and provides support services to global regions.

**Job Title**:
Information Risk Manager

**Date**:
**Department**:
IT Infrastructure & Production

**Location**:
Mumbai

**Business Line / Function**:
CIB IT

**Reports to**:

- (Direct)_

**Grade**:
(if applicable)
- (Functional)_

**Number of Direct Reports**:
0

**Directorship / Registration**:
NA

**Position Purpose**

IRM is responsible to maintain the IT Risk Framework and its associated controls and reporting. This role is responsible to evaluate overall information technology risk, maintain an active view, and report on the actual, mitigated and residual risk in the technology organization. All Risk & Control closure activities are coordinated through this role, including the actual submissions for closure.

**Responsibilities**

**Direct Responsibilities**
- Serve as liaison to auditors, consultants, and the bank Compliance Committee regarding documentation and review of IT Infrastructure domains.
- Collaborate with internal & external stakeholders to execute central & local OPC controls, develop corrective action plan for control gaps, and ensure closure meets BNP Paribas requirements or industry best practices.
- Mitigate risk by analyzing the root cause of issues, impacts to business, and required corrective actions and develop technological and security solutions to cover all IT Infrastructure risks.
- Timely escalation to Senior Management on the open gaps, which are unresolved and pose IT Infrastructure risk to the organization compliance.
- Ensure compliance against statutory obligations and seek opportunities to enhance the efficiency of the IT Infrastructure policies and procedures. Play security advisory and counsel role as needed.
- Create awareness across the organization on the developments within IT domain based on the policies, procedures and guidelines issued by Group / Regional / Territory Management.
- Represent IT Infrastructure & Production at various security & control governance forums. Review and submit IT Infrastructure reports and ensure actions are closed.
- Maintain ISO 9001:2015 and ISO 27001:2013 certifications for IT Infrastructure & Production department.

**Contributing Responsibilities**
- Contribute to the Risk and Control Self-Assessment for the risks emanating for IT Infrastructure & Production department.
- Preparation of presentations for various governance & controls forums.

**Technical & Behavioral Competencies**
- 10 years or more of IT Infrastructure / Audit experience, preferably with a Financial Services, Brokerage, or Public Accounting Firm.
- Strong technical and analytical skills and willingness to learn and keep up with industry, regulatory and technical developments.
- Ability to collaborate with Technology, Production Security and IT Security and work within a team.
- Strong written and verbal communication skills. Risk Reporting & Metrics skills are required. Must be able to summarize and communicate technical data to a non-technical audience.
- Bachelor’s Degree (Computer Science or IT related preferred)
- Minimum one certification is mandatory - CISA, CRISC, CISSP & other relevant certifications.

**Skills Referential**

Behavioural Skills:
Creativity & Innovation / Problem solving

Communication